Unlikely unless you increased the log sizes massively or are exporting to an external syslog server. You will have to enable it again and wait for it to fail. Steve

Thanks. E-waste it is then.

Yeah running iperf on pfSense will not give you a good result. pfSense is not a good server, it's not optimised as an end point for connections. Also the iperf process itself uses significant CPU cycles that could be used to move packets. Test between two hosts on WAN and LAN. Steve

Yes, just enable serial console in Sys > Adv > Admin Access. However you board may not boot without a graphics card or it may require some BIOS setting to allow it to do so. Steve

@Ramirez47 Another option (probably?) disable audio in the BIOS/UEFI. I always disable Audio in my pfsense systems including my CI323 at the BIOS level along with other unused stuff, such as COM ports ( i don't have a need for them some might) and things.

I have to disagree on one thing only.. "planned obsolesce" is a fact not a myth, not everyone applies this policy of course but there are alot of example out there proving this the more evident one is for example to limit the life of a light bulb Apple's use of pentalobe screws in their newer devices is an attempt to prevent the consumer from repairing the device themselves Non-user-replaceable batteries Smart chips in ink cartridges to prevent them from being used after a certain threshold constitutes "planned obsolescence" when you design a board and you put capacitors in a place where the temperature is hot you know that the capacitor itself would last no more than 3 years. there are alot of triks to make everything with "planned obsolesce" in mind last example ... server grade vs consumer grade

Some additional info a leave here "How to see which NIC is installed in which PCI slot by script ?"

It may depend on the cost of the downtime. At $xxx per hour how much would downtime cost? pfSense does support CARP for hardware failover so if you did buy another (at each location) the failover could be basically instant. It will sync states if the network drivers are the same on both. There is a caveat for the models with switches, in that as I recall it can't detect if one switch port is disconnected if the entire switch is still functional so you want to use the OPT1 port for the LAN and the switch ports for the CARP sync. pfSense also runs on PC hardware so if you have an old/spare PC and an extra NIC for it that would work as well.

A pfSense 2.5 Snapshot: https://www.pfsense.org/snapshots/ Coreboot updates would from the manufacturer. Though if may be possible to build your own since Coreboot is open source. Actually correcting a problem like this though is.... non-trivial! Steve

@stephenw10 Awesome, will give this a try and report the results

^ exactly! ;) if you found a 8860 at a price point you are happy with - snag it! ;) its prob overkill to be honest, but if your happy with the price.. I have a 4860 on my home network - it is for sure way more than what is required.. But go big or go home works for me ;)

When you say natted no delay you mean between vms behind the same natted connection? Or from natted connection to your gateway.. You can still function with a natted network to your physical network. Other than port forwarding from your physical to your natted devices would be required for unsolicited traffic from your physical to your natted vms.. If you feel your VM solution is adding unwarranted extra delay - then yeah you would need to get with your VM software solution support... This has zero to do with pfsense..

It's not worth putting a hardware crypto card in there. At least none that I'm aware of. Card that might actually be effecttive there are not supported in FreeBSD/pfSense. However it does look like those boxes support 5600 Xeons that do have AES-NI so that might be an option for you. That's based on a brief Google, more research needed! 10 year old hardware though, if it's crashing at all it might be time to replace it. Edit: Those 5600 Xeons are very cheap now though, probably worth throwing some in there as a test. Steve

@eiger3970 you can get used hilink dongles for 20 bucks, they show up as ethernet cards on and are pretty reliable, you need some modules and you can manage these dongles thru browser,

@stephenw10 It seems to have worked! I'll have wait to till I receive the breakout cable to validate that it worked!

I'm running pfsense on an Optiplex 3020 with a i5-4570 and a quad i340 NIC, 8GB of ddr3 low voltage and a 120gb ssd. With Power D set to "adaptive" it pulls 22 watts average while being used, and peaks at 35 watts when booting or doing a full pfBlockerNG-devel reload. I've been very happy with it.

It's still 12 or 13 only so you would be looking at a special build of 2.5. Which doesn't exist so, no, it still won't run. If we were ever to look at RasPi it would be far more likely to be the Pi 4 because of the vastly superior Ethernet on that board. Steve

@stephenw10 Thanks for the info, always interested in the SOHO options

Good to hear. Thanks for reporting back.

@Wezzo switch from 22.x HiLink to 21.x Stick fw (if not done yet) and configure as described here: https://forum.netgate.com/topic/133051/huawei-e3372h-lte-dongle-and-ncm-cdc-mode